Privacy Policy

Last updated: March 5, 2026

1. Introduction

Grid ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Platform, including any other media form, media channel, mobile website, or mobile application related to, operated, or connected therewith (collectively, the "Platform").

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Platform. Your continued use of the Platform after posting changes to this Privacy Policy will mean you accept those changes.

2. Information We Collect

2.1 Personal Information You Provide

We collect information you directly provide to us, such as:

  • Account Registration: Name, email address, phone number, password, and payment information
  • Barbershop Information: Shop name, description, address, business hours, services offered, and barber profiles
  • Booking Information: Customer names, phone numbers, email addresses, preferred time slots, and service preferences
  • Payment Information: Credit card details (processed securely through our payment processor, Stripe)
  • Communications: Messages you send us through support channels, feedback, and inquiries

2.2 Information Collected Automatically

When you visit the Platform, we automatically collect certain information about your device and how you interact with it:

  • Log Data: IP address, browser type, pages visited, time and date stamps, and referring URL
  • Device Information: Device type, operating system, and unique device identifiers
  • Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance your experience and analyze usage
  • Analytics: Information about your interactions with the Platform through analytics tools

3. How We Use Your Information

We use the information we collect for various purposes:

  • To provide and maintain the Platform and its services
  • To process your transactions and send related information
  • To create and manage your account
  • To facilitate bookings between customers and barbershops
  • To send you promotional communications (if you opt-in)
  • To respond to your inquiries and customer support requests
  • To monitor and analyze usage patterns and improve the Platform
  • To detect, investigate, and prevent fraudulent transactions and other illegal activities
  • To comply with legal obligations and enforce our Terms of Service
  • To personalize and improve your experience on the Platform

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who assist us in operating the Platform and conducting our business, including:

  • Stripe (payment processing)
  • Supabase (authentication and database hosting)
  • Email service providers
  • Analytics providers
  • Cloud hosting providers

4.2 Public Information

Information you include in your public barbershop profile (shop name, description, services, barber names, hours) will be visible to customers searching for booking services.

4.3 Legal Requirements

We may disclose your information when required by law or when we believe in good faith that such disclosure is necessary to:

  • Comply with a legal obligation or court order
  • Protect our rights, privacy, safety, or property
  • Protect against fraud or security issues
  • Enforce our Terms of Service

4.4 Business Transfers

If Grid is involved in a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction or proceeding, your information may be part of that transaction.

5. Data Security

We implement comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

  • HTTPS encryption for all data transmitted to and from the Platform
  • Secure password hashing and salting
  • Regular security audits and vulnerability assessments
  • Limited access to personal information on a need-to-know basis
  • Secure handling of payment information through PCI-compliant processors

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You acknowledge and assume the risk associated with transmitting information to us.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Specifically:

  • Active Accounts: Information is retained while your account is active
  • Deleted Accounts: Upon deletion, we retain data for 90 days for recovery purposes, then permanently delete it
  • Legal Obligations: We may retain information longer if required by law
  • Booking Records: Historical booking data is retained for business and legal purposes

7. Your Rights and Choices

7.1 Access and Portability

You have the right to access your personal information and request a portable copy of your data in a structured, commonly used, and machine-readable format.

7.2 Correction and Deletion

You can update or correct your personal information through your account settings. You also have the right to request deletion of your account and associated data, subject to legal retention requirements.

7.3 Marketing Communications

You can opt-out of receiving promotional emails from us by clicking the "unsubscribe" link in our emails or adjusting your preferences in your account settings.

7.4 Cookies

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of the Platform.

7.5 GDPR Rights (EU Users)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including the right to object to processing and the right to lodge a complaint with a supervisory authority.

8. Cookies and Tracking Technologies

Grid uses cookies and similar tracking technologies to enhance your experience and collect information about how you use the Platform. These include:

  • Essential Cookies: Required for authentication and security
  • Analytics Cookies: Help us understand how users interact with the Platform
  • Preference Cookies: Remember your settings and preferences

You can control your cookie preferences through your browser settings or our cookie consent banner.

9. Third-Party Links

The Platform may contain links to third-party websites and services that are not operated by Grid. This Privacy Policy does not apply to third-party websites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services before providing your information.

10. Children's Privacy

The Platform is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information as quickly as possible.

11. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence, including Portugal and the United States. These countries may not have data protection laws equivalent to those in your home country. By using the Platform, you consent to such transfers.

12. Data Processing Agreement

For users subject to GDPR or similar regulations, we process personal data as a Data Processor on behalf of Barbershop Owners (Data Controllers). A Data Processing Agreement is available upon request.

13. Changes to This Privacy Policy

Grid may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by posting the revised Privacy Policy on the Platform and updating the "Last updated" date. Your continued use of the Platform after changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Grid Privacy Team

Email: privacy@grid.com

Support: Contact Page

If you are located in the EU and wish to lodge a complaint with a supervisory authority, you have the right to do so in your country of residence.